5.1.2 KDC Security

Because authentication of the administrator is by Kerberos, in this protocol, the key distribution center (KDC) is itself to be kept secure—free from tampering and free from vulnerabilities that would allow privilege-elevation penetrations.